Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
231161	8.5	危険	php-stats	-	Php-Stats における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2007-5453	2012-12-20 18:33	2007-10-14	Show	GitHub Exploit DB Packet Storm

231162	10	危険	php-stats	-	Php-Stats の php-stats.recjs.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-5452	2012-12-20 18:33	2007-10-14	Show	GitHub Exploit DB Packet Storm

231163	7.5	危険	softbiz	-	Softbiz Recipes Portal Script の searchresult.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-5449	2012-12-20 18:33	2007-10-14	Show	GitHub Exploit DB Packet Storm

231164	1.9	注意	VMware	-	VMware Workstation などの Reconfig.DLL における vmount2.exe がサービス運用妨害 (DoS) 状態となる脆弱性	CWE-20 不適切な入力確認	CVE-2007-5438	2012-12-20 18:33	2007-10-12	Show	GitHub Exploit DB Packet Storm

231165	4.3	警告	pro.setun	-	PRO-search におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5434	2012-12-20 18:33	2007-10-12	Show	GitHub Exploit DB Packet Storm

231166	4.3	警告	siteup	-	Site-Up の index.cgi におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5433	2012-12-20 18:33	2007-10-12	Show	GitHub Exploit DB Packet Storm

231167	7.5	危険	scottmanktelow	-	Stride における管理者権限を取得される脆脆弱性	CWE-200 情報漏えい	CVE-2007-5432	2012-12-20 18:33	2007-10-12	Show	GitHub Exploit DB Packet Storm

231168	7.5	危険	scottmanktelow	-	Stride における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-5430	2012-12-20 18:33	2007-10-12	Show	GitHub Exploit DB Packet Storm

231169	4.3	警告	Umisoft	-	UMI CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5428	2012-12-20 18:33	2007-10-12	Show	GitHub Exploit DB Packet Storm

231170	7.5	危険	Tiki Software Community Association	-	TikiWiki の tiki-graph_formula.php における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2007-5423	2012-12-20 18:33	2007-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197461	8.8	HIGH Network	cisco	web_security_appliance asyncos	A vulnerability in the configuration management of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform command injection and elevate privileg…	NVD-CWE-Other	CVE-2021-1359	2024-11-21 14:44	2021-07-9	Show	GitHub Exploit DB Packet Storm

197462	6.1	MEDIUM Network	cisco	sf220-24_firmware sf220-24p_firmware sf220-48_firmware sf220-48p_firmware sg220-26_firmware sg220-26p_firmware sg220-28mp_firmware sg220-50_firmware sg220-50p_firmware	Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary c…	CWE-79 Cross-site Scripting	CVE-2021-1571	2024-11-21 14:44	2021-06-17	Show	GitHub Exploit DB Packet Storm

197463	6.5	MEDIUM Network	cisco	jabber	Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for Mac, and Cisco Jabber for mobile platforms could allow an attacker to access sensitive information or cause a denial of service …	CWE-20 Improper Input Validation	CVE-2021-1570	2024-11-21 14:44	2021-06-17	Show	GitHub Exploit DB Packet Storm

197464	6.5	MEDIUM Network	cisco	jabber	Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for Mac, and Cisco Jabber for mobile platforms could allow an attacker to access sensitive information or cause a denial of service …	CWE-20 Improper Input Validation	CVE-2021-1569	2024-11-21 14:44	2021-06-17	Show	GitHub Exploit DB Packet Storm

197465	5.5	MEDIUM Local	cisco	anyconnect_secure_mobility_client	A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected system. This vulnerabil…	-	CVE-2021-1568	2024-11-21 14:44	2021-06-17	Show	GitHub Exploit DB Packet Storm

197466	6.5	MEDIUM Network	cisco	meeting_server	A vulnerability in the API of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because …	-	CVE-2021-1524	2024-11-21 14:44	2021-06-17	Show	GitHub Exploit DB Packet Storm

197467	6.7	MEDIUM Local	cisco	anyconnect_secure_mobility_client	A vulnerability in the DLL loading mechanism of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected devic…	CWE-427 Uncontrolled Search Path Element	CVE-2021-1567	2024-11-21 14:44	2021-06-17	Show	GitHub Exploit DB Packet Storm

197468	7.4	HIGH Network	-	-	A vulnerability in the Cisco Advanced Malware Protection (AMP) for Endpoints integration of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco Web Security Appliance (WSA) could allow a…	CWE-295 Improper Certificate Validation	CVE-2021-1566	2024-11-21 14:44	2021-06-17	Show	GitHub Exploit DB Packet Storm

197469	6.1	MEDIUM Network	cisco	sf220-24_firmware sf220-24p_firmware sf220-48_firmware sf220-48p_firmware sg220-26_firmware sg220-26p_firmware sg220-28mp_firmware sg220-50_firmware sg220-50p_firmware	Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary c…	CWE-79 Cross-site Scripting	CVE-2021-1543	2024-11-21 14:44	2021-06-17	Show	GitHub Exploit DB Packet Storm

197470	8.1	HIGH Network	cisco	sf220-24_firmware sf220-24p_firmware sf220-48_firmware sf220-48p_firmware sg220-26_firmware sg220-26p_firmware sg220-28mp_firmware sg220-50_firmware sg220-50p_firmware	Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary c…	CWE-287 Improper Authentication	CVE-2021-1542	2024-11-21 14:44	2021-06-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed